Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: WOBFzzr2v2/AXo1l7AJVFkApYO3ZKSEq7bAaacbX+aA=
Subject key identifier: 0E:20:8D:BD:97:3B:67:90:43:0D:7E:5B:C3:61:FA:A8:45:EF:AB:43
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0194BD857DEDF9936D7692565C8D6B1CE293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: nrkX4Y/FvZjidT82Y5ZZsYQJCdVxElHKdFf+W8yoWyY=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:ed:f9:93:6d:76:92:56:5c:8d:6b:1c:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=0e208dbd973b6790430d7e5bc361faa845efab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:92:9d:cc:20:a5:d4:b6:23:4f:5e:17:d7:
fd:96:e7:cf:77:62:71:2f:b3:b4:b3:cb:8e:a5:c1:
c0:8d:9f:4b:89:1f:cd:71:f9:6f:78:bf:30:78:fe:
8e:c1:d7:87:5e:ef:95:d3:93:90:59:ea:f7:b8:2e:
e0:d7:3f:33:ce:36:3c:4e:0a:c5:f6:50:00:e9:e4:
9a:29:0b:1b:cc:47:29:1f:30:9e:b5:7e:61:e9:70:
5d:a2:d6:f0:61:52:ae:8e:cf:59:0f:6d:01:b3:76:
80:ee:51:ac:cd:54:21:28:78:c0:a4:39:41:bb:b7:
bd:bc:0c:eb:26:37:ef:d7:4e:a5:1d:96:33:d2:6e:
7b:58:15:3d:9f:ea:b6:6b:d2:35:ac:48:de:69:53:
d7:0c:0f:09:ab:98:8d:a3:c7:0f:fc:78:55:05:ab:
5e:88:6c:2e:cd:7c:a7:38:c8:a4:58:a1:c0:48:66:
f0:d3:3a:ed:84:86:2a:a5:57:ba:5c:45:30:18:3c:
65:70:72:66:1e:e1:a9:9e:7f:f1:13:71:3b:8d:1d:
a1:18:1d:f5:04:a9:c8:6a:af:02:18:bf:37:0a:dd:
62:50:f1:e7:ad:c3:b5:8b:66:a4:33:eb:f1:bc:f8:
b2:19:4c:e5:4f:37:1e:29:67:89:97:cd:82:05:7f:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:8D:BD:97:3B:67:90:43:0D:7E:5B:C3:61:FA:A8:45:EF:AB:43
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:95:56:25:9c:04:97:38:f6:0a:98:6e:30:d8:0e:40:08:a1:
3e:5a:0b:38:cb:11:7e:e9:52:1b:b4:ad:1f:b5:95:38:80:f7:
1b:b5:73:b6:8c:6d:85:d3:a7:1c:5c:8e:da:aa:22:2e:40:71:
9c:ee:65:c3:43:64:5d:13:f8:38:b2:b6:48:b5:a7:a6:ca:b8:
8b:70:0d:53:3f:5c:32:72:89:58:8f:92:b9:88:aa:d1:c0:80:
88:ac:ef:15:d0:aa:31:5a:ff:b8:6d:57:75:f1:c8:b4:33:cb:
94:fc:73:36:24:23:2c:b6:97:74:65:b6:fa:95:ce:14:26:72:
7e:81:c8:10:5f:e9:3a:d0:ab:22:ed:d8:00:44:06:80:59:8c:
01:fa:03:f5:d1:a9:aa:32:15:4d:7c:09:ec:c5:6d:83:0a:d0:
ce:2f:09:2b:01:04:9c:bf:02:33:0a:2e:de:d2:20:59:29:7d:
c3:c4:ec:b2:52:c5:9c:7b:96:42:bf:64:d1:ff:91:73:6a:d9:
39:67:68:15:ea:a6:c3:bb:67:54:26:77:7b:81:48:b4:9a:26:
c1:0f:51:80:eb:d7:cd:cf:10:c3:0a:2d:45:7c:ce:6c:31:66:
f9:67:9b:4a:70:65:30:e3:d4:d5:a0:e5:05:d3:b8:9d:b2:33:
a3:b9:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:23 2025 by rpki-client